Submitted by: Neel Mehta, Adam Langley, Bodo Moeller

PR: 1552
Submitted by: Roumen Petrov <openssl@roumenpetrov.info>, "Alon Bar-Lev" <alon.barlev@gmail.com>

and response verification.

Submitted by: Zoltan Glozik <zglozik@opentsa.org>
Reviewed by: Ulf Moeller

Change assignment strategy: rathern than using max+r for new codes,
find first hole in list of existing codes.

and mkdef.pl spinning in endless loop.

to handle multi-line comments and endless loop while parsing overloaded
gnu-ish __attribute__].

during "make errors" and thus during "make update".

Fix lots of bugs that util/ck_errf.pl can detect automatically.
Various others of these are still left to fix; that's why
"make update" will complain loudly when run now.

at runtime.

 - Enforce that there should be no policy settings when the language
   is one of id-ppl-independent or id-ppl-inheritAll.
 - Add functionality to ssltest.c so that it can process proxy rights
   and check that they are set correctly.  Rights consist of ASCII
   letters, and the condition is a boolean expression that includes
   letters, parenthesis, &, | and ^.
 - Change the proxy certificate configurations so they get proxy
   rights that are understood by ssltest.c.
 - Add a script that tests proxy certificates with SSL operations.

Other changes:

 - Change the copyright end year in mkerr.pl.
 - make update.

we only check to the opening parenthesis anyway...

Submitted by: Nils Larsch
Reviewed by: Bodo Moeller

Submitted by: Nils Larsch <nla@trustcenter.de>

files.

Change mkerr.pl so that it puts the ERR_load_..._strings()
prototype in header files that it writes.

away now...

has helped me a bit when I ran into trouble.

be explicitly stated with PKCS#7 verify.

Also fix for util/mkerr.pl: if the -nostatic option is being used this will be
for an external library so the autogenerated C file should include the
header file as:
#include "any/path/to/header.h"
rather than the internal library form:
#include <openssl/header.h>

also add a few missing prototypes.

a -write option is needed to actually change anything. Second attempt at
getting rid of ERR, ERRC definitions: it might even work this time :-)